Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30C1C0FE00BB11F0906344A5762E951A.roa
File: 30C1C0FE00BB11F0906344A5762E951A.roa (raw, json)
Hash identifier: TsoRE4SAJBRScZhdafLnLKKcj0RhojU5P2dSJAPKqk8=
Subject key identifier: 69:C5:C8:E3:68:90:7D:13:BC:E1:24:D8:08:D6:80:E4:85:9B:58:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30C1C0FE00BB11F0906344A5762E951A.roa
Signing time: Fri 14 Mar 2025 10:00:42 +0000
ROA not before: Fri 14 Mar 2025 10:00:38 +0000
ROA not after: Sun 15 Mar 2026 10:00:38 +0000
asID: 132839
IP address blocks: 45.207.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83412 (0x145d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:00:38 2025 GMT
Not After : Mar 15 10:00:38 2026 GMT
Subject: CN=67d3fe4a-3dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:95:82:2c:d1:7b:a6:4b:7b:d6:cd:d5:16:
ad:38:65:9c:41:97:bd:e7:e5:02:c9:c1:ac:a7:2b:
e6:8d:97:90:23:cf:40:97:55:02:75:ab:ec:13:25:
00:23:c9:2b:07:4e:09:7c:9a:ec:aa:ba:d1:34:43:
49:77:31:82:f2:fa:3b:ce:a2:cd:00:d5:f8:88:89:
6f:d7:7f:1f:d1:9c:0c:92:3a:5c:30:26:93:76:16:
d9:aa:c1:9a:61:24:b7:58:07:7c:a1:39:17:85:02:
e0:2d:2d:1a:9e:8c:65:eb:00:32:d0:ca:95:f2:39:
46:1f:8f:46:1f:9a:ae:7d:43:49:6c:30:03:b3:89:
f7:34:86:8a:94:d5:80:f9:66:c1:e0:72:4a:f9:c5:
7b:33:d8:c4:36:48:92:92:46:5f:70:0a:97:1a:5b:
a7:2d:cc:87:ab:c4:07:99:73:50:ce:93:0d:9f:52:
44:05:cc:85:dc:81:e1:6e:07:e9:a8:a0:d6:5d:bd:
ee:60:98:9e:4b:9a:41:f3:f1:0f:5d:07:a4:66:30:
82:34:30:4e:93:1f:33:d4:fc:7f:94:3e:fe:49:7a:
0d:e0:a4:b2:67:85:f8:3d:eb:91:ab:ff:0c:df:a9:
db:fb:9f:9f:d1:3d:90:ec:87:c2:84:52:69:df:ea:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:C8:E3:68:90:7D:13:BC:E1:24:D8:08:D6:80:E4:85:9B:58:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30C1C0FE00BB11F0906344A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.7.0/24
Signature Algorithm: sha256WithRSAEncryption
64:79:32:82:9a:52:4d:54:42:60:0e:6e:9e:2a:84:3d:f4:a3:
86:b3:35:5c:75:a7:3a:3e:db:01:bb:b1:c2:fd:9c:d8:fe:21:
0c:4f:c8:f6:08:2e:24:48:bb:0c:60:4d:e3:39:9f:9b:93:ca:
1a:ad:80:40:a8:43:50:8f:eb:2f:59:84:20:4c:86:97:0c:0a:
eb:ab:56:b2:60:52:a5:2d:69:01:88:fe:6e:d1:9e:43:e8:31:
45:b5:f1:ac:a9:f5:33:a8:27:f8:c7:25:13:32:98:b0:e2:74:
74:fd:e0:7a:ed:23:b9:7a:2a:29:2e:24:c1:00:fd:86:c6:85:
da:4a:ee:9e:44:98:80:e6:41:0a:e2:d7:d0:69:91:4e:9b:d5:
49:e2:6f:ba:55:22:7c:c6:3c:96:36:8c:96:58:e4:9c:1a:c0:
47:15:a0:e5:18:7d:63:14:c6:a7:e8:7b:ab:b4:8a:e9:f8:a2:
68:48:76:71:6b:d0:10:02:62:77:17:71:12:a0:51:d4:ed:43:
64:78:84:8f:3f:c2:b1:e3:39:5a:11:c9:3e:a6:60:b5:aa:53:
67:43:af:aa:69:e5:31:7c:0e:70:f4:32:1f:e7:fb:ec:7e:f6:
6e:c0:ac:c0:f6:ff:8a:26:07:d7:e4:65:c8:80:04:15:47:ba:
27:7f:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:50 2025 by rpki-client